You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
ServiceProvider class, which creates SP metadata (getMetadataXml()), signed authentication requests (createAuthnRequest()), and signed logout responses (createLogoutResponse()) from one set of SP settings. This ensures the messages match what the metadata declares.
Changed
SP metadata now sets AuthnRequestsSigned="true" on the SP SSO descriptor, so IdPs can require that authentication requests are signed.
Removed
SamlUtils::createSpMetadata(). Use ServiceProvider::getMetadataXml() instead.